CVE-2015-3190: Cloudfoundry Cf-Release

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Affected products

• Cloudfoundry Cf-Release: up to and including 209
• Pivotal Software Cloud Foundry Elastic Runtime: up to and including 1.4.5
• Pivotal Software Cloud Foundry Uaa: up to and including 2.2.6

Published 2017-05-25. Last modified 2026-06-17.